$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: ALrwb3JtrhwZ7c1PFvb5IVUKq/kJ/rQHRgEitsP1qhg= Subject key identifier: 1F:0E:35:66:C2:F9:B7:75:95:09:36:9A:93:EF:5E:4F:7F:76:30:EC Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 56 Signing time: Fri 25 Apr 2025 06:11:43 +0000 Manifest this update: Fri 25 Apr 2025 06:11:43 +0000 Manifest next update: Fri 02 May 2025 06:11:43 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: YqaSpsLpsFkNN+G3d0U+fLioOqf0XX6TVf08G3w9Nwk=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Apr 25 06:11:43 2025 GMT Not After : May 2 06:11:43 2025 GMT Subject: CN=680b279f-82bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:bf:d2:71:5c:f9:47:b9:82:e7:47:6a:ac: 32:29:1e:45:a9:76:2a:13:95:23:4d:68:cb:d1:f5: 40:b6:15:28:f3:b6:2d:cf:54:ec:86:71:21:b4:07: 55:9c:c8:e0:44:bc:a7:1d:7c:e0:f8:f8:f7:45:34: ec:7e:c0:c1:02:88:33:b8:04:30:0c:e6:76:cf:f9: 1c:0a:2f:87:4f:04:fc:39:b4:7f:b5:4d:d1:83:ff: e1:a7:08:00:41:b2:ab:16:3e:70:7a:a3:ec:37:d8: e7:fe:7d:a7:ef:17:c2:36:75:ed:40:ec:b0:f9:cc: d3:3a:21:5f:3f:c7:4d:46:fe:29:47:ac:47:77:c4: 64:45:4f:f9:d9:b0:64:6b:04:69:d1:7c:e0:06:90: 00:15:f0:3d:8b:66:66:8f:4f:93:dd:db:2d:e0:cc: 23:0e:d2:2d:cb:27:72:89:dc:2a:72:8f:45:95:a1: 59:df:f5:8b:ff:48:0d:d9:87:7c:39:8e:39:fb:d6: fc:e7:20:63:69:88:cf:0f:47:c3:7a:f6:57:76:44: 62:4c:8c:bd:22:1c:fe:6d:dc:0c:9c:5a:e4:fb:14: d0:72:2d:98:e1:30:b4:aa:d0:9b:c9:d5:9b:2c:e7: 4b:ba:9f:81:8d:c7:83:ce:6d:21:05:cc:3e:39:6f: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:35:66:C2:F9:B7:75:95:09:36:9A:93:EF:5E:4F:7F:76:30:EC X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:58:99:60:08:61:83:ae:6d:f6:9c:8f:a0:de:45:b5:c3:e6: ef:f8:f3:70:28:fc:f7:30:6b:ca:5d:bc:e8:a8:a9:74:87:0c: 79:26:e7:b9:e7:73:44:a2:9a:c0:af:8f:a1:a8:3f:ae:b5:fc: 17:72:73:ea:3d:28:b9:05:86:16:ee:97:80:ea:43:0f:36:d6: 3c:ae:38:da:5a:83:5f:7a:30:14:86:da:e4:5b:22:8e:5b:97: b3:a7:6c:b8:de:58:ca:37:aa:19:9e:83:12:fb:b9:8b:67:85: 3d:4a:34:8c:0e:cd:7d:43:92:5e:3b:f5:f6:a9:b3:bb:97:ce: 88:23:d7:9e:0f:08:81:f7:4a:e0:ea:24:7e:30:d3:47:b6:5c: db:43:7e:b1:47:4b:0b:54:c3:f8:79:94:fd:c7:cb:54:85:57: a2:dc:fb:ec:48:69:92:f0:d6:52:09:7f:13:fd:37:d8:68:2e: a2:bd:a5:a4:4c:4f:0e:64:0d:71:19:92:f8:84:7b:92:48:6d: 41:09:7e:f7:f9:44:10:66:9e:62:5a:b9:71:01:7c:f1:1c:2f: 29:b7:0d:fd:85:d7:a8:41:fa:97:22:ce:57:3d:1d:f0:3a:e4: 1e:16:41:21:22:5d:37:4c:cf:b5:7a:3a:46:57:ea:a8:08:6e: 5a:e6:04:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoQ0ZFMDcxQTk3MkZENzhBNjdGNkQzRUQ1NkE2MTg0MzQw QUIzRTNBNjAeFw0yNTA0MjUwNjExNDNaFw0yNTA1MDIwNjExNDNaMBgxFjAUBgNV BAMTDTY4MGIyNzlmLTgyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgOb/ScVz5R7mC50dqrDIpHkWpdioTlSNNaMvR9UC2FSjzti3PVOyGcSG0B1Wc yOBEvKcdfOD4+PdFNOx+wMECiDO4BDAM5nbP+RwKL4dPBPw5tH+1TdGD/+GnCABB sqsWPnB6o+w32Of+fafvF8I2de1A7LD5zNM6IV8/x01G/ilHrEd3xGRFT/nZsGRr BGnRfOAGkAAV8D2LZmaPT5Pd2y3gzCMO0i3LJ3KJ3Cpyj0WVoVnf9Yv/SA3Zh3w5 jjn71vznIGNpiM8PR8N69ld2RGJMjL0iHP5t3AycWuT7FNByLZjhMLSq0JvJ1Zss 50u6n4GNx4PObSEFzD45byJvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHw41ZsL5 t3WVCTaak+9eT392MOwwHwYDVR0jBBgwFoAUz+BxqXL9eKZ/bT7VamGENAqz46Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0JGNTBFODYyQTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvei1CeHFYTDllS1pfYlQ3VmFtR0VOQXF6NDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0JGNTBFODYyQTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUta X2JUN1ZhbUdFTkFxejQ2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABNYmWAIYYOubfacj6DeRbXD5u/483Ao/Pcwa8pdvOioqXSHDHkm57nn c0SimsCvj6GoP661/Bdyc+o9KLkFhhbul4DqQw821jyuONpag196MBSG2uRbIo5b l7OnbLjeWMo3qhmegxL7uYtnhT1KNIwOzX1Dkl479faps7uXzogj154PCIH3SuDq JH4w00e2XNtDfrFHSwtUw/h5lP3Hy1SFV6Lc++xIaZLw1lIJfxP9N9hoLqK9paRM Tw5kDXEZkviEe5JIbUEJfvf5RBBmnmJauXEBfPEcLym3Df2F16hB+pcizlc9HfA6 5B4WQSEiXTdMz7V6OkZX6qgIblrmBIk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:52 2025 by rpki-client